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generating, by the black box server, the black box, such generated black 
box being unique and having a public / private key pair; 

delivering, by the black box server, the generated black box to the DRM 

system; and 

installing, by the DRM system, the delivered black box in such DRM 

system. 

\ 

IJX^ The method of claim ljXvwherein the DRM system has a previously 
installed black box prior to the requesting step, the method further comprising determining prior 
to the requesting step that the previously installed black box is non-unique. 

108. The method of claim 106 wherein the DRM system has a previously 
installed black box prior to the requesting step, the method further comprising determining prior 
to the requesting step that the previously installed black box is not current. 

1^ The method of claim 1 (^wherein the requesting step comprises 
requesting the black box by way of a network connection to the black box server. 

The method of claim lp^wherein the requesting step comprises 
requesting the black box by way of an Internet connection to the black box server. 
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m . The method of claim 1 (^wherein the DRM system has a first previously 
installed black box prior to the requesting step, the first previously installed black box having a 
public / private key pair different from the public / private key pair of the generated black box, 
and wherein the generating step includes providing the generated black box with the public / 
private key pair of the first previously installed black box. 

v v 

1 Y2. The method of claim 1 Yl wherein the DRM system had a second 
previously installed black box prior to having the first previously installed black box, the second 
previously installed black box having a public / private key pair different from the public / 
private key pair of the first previously installed black box and also different from the public / 
private key pair of the generated black box, and wherein the generating step further includes 
providing the generated black box with the public / private key pair of the second previously 
installed black box. 



\yi. The method of claim W6 wherein the generating step includes providing 
the generated black box with an identifier indicative of currency. 



9/ * 

ljf4. The method of claim wherein the generating step includes providing 
the generated black box with a version number. 



<o I, 

1 16 . The method of claim 1^6 wherein the generating step includes providing 

the generated black box with a digital certificate. 



DOCKET NO.: MSFT-109 / 127334.9 PATENT 

-5- 

IJ^ The method of claim J^wherein the generating step includes providing 
the generated black box with a digital certificate proffering that the generated black box should 
be trusted. 



The method of claim wherein the generating step includes encrypting 
at least a portion of the private key of the generated black box according to a code-based 
encryption technique. 

\]f$. The method of claim 1 ^/wherein the generating step includes encrypting 
at least a portion of the private key of the generated black box according to software code 
associated with the generated black box, whereby adulteration of such software code prevents 
such private key from being decrypted. 

' V > 

L1'9. The method of claim jflo wherein the generating step includes associating 
the generated black box with the DRM system / computing device, whereby the generated black 
box is inoperable on another DRM system / computing device. 

V2.0. The method of claim y^wherein the requesting step includes providing 
information unique to the DRM system / computing device, and wherein the generating step 
includes generating the black box based in part on the provided information, whereby the 
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generated black box can recognize whether it is intended for the DRM system / computing 
device upon which it is installed. 

\£ 1 . The method of claim wherein the DRM system / computing device is 
a first DRM system / computing device, wherein the generating step includes associating the 
generated black box with the first DRM system / computing device and also with a second DRM 
system / computing device, whereby the generated black box is inoperable on another DRM 
system / computing device which is not the first or second DRM system / computing device. 

ytlJ In combination with a digital rights management (DRM) system operating 
on a computing/device, the DRM system requiring a black box for performing decryption and 
encryption functions, a method of obtaining the black box by the DRM system, the method 
comprising: 

requesting the black box from a black box server, the black box server 
thereafter generating the black box, such generated black box being unique and having a public / 
private key pair; 

receiving the generated black box from the black box server; and 
installing the received black box in such DRM system. 

123. The method of claim 1^2 wherein the DRM system has a previously 
installed black box prior to the requesting step, the method further comprising determining prior 
to the requesting step that the previously installed black box is non-unique. 
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1 24. The method of claim 122 wherein the DRM system has a previously 
installed black box prior to the requesting step, the method further comprising determining prior 
to the requesting step that the previously installed black box is not current. 

y 17 

jZ5. The method of claim 1 ^wherein the requesting step comprises 
requesting the black box by way of a network connection to the black box server. 

l^fT The method of claim j^^wherein the requesting step comprises 
requesting the black box by way of an Internet connection to the black box server. 

127. The method of claim Y22 wherein the DRM system has a first previously 
installed black box prior to the requesting step, the first previously installed black box having a 
public / private key pair different from the public / private key pair of the generated black box, 
and wherein the requesting step includes providing the public / private key pair of the first 
previously installed black box to the black box server, whereby the generated black box is 
provided with the public / private key pair of the first previously installed black box. 

L28. The method of claim 127 wherein the DRM system had a second 
previously installed black box prior to having the first previously installed black box, the second 
previously installed black box having a public / private key pair different from the public / 
private key pair of the first previously installed black box and also different from the public / 
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private key pair of the generated black box, and wherein the requesting step further includes 
providing the public / private key pair of the second previously installed black box to the black 
box server, whereby the generated black box is also provided with the public / private key pair 
of the second previously installed black box. 



129. The method of claim 122 wherein the received black box includes an 

/ 9 



identifier indicative of currency. 



130. The method of claim L29 wherein the received black box includes a 



version number. 



1 3'1 . The method of claim 1 22 wherein the received black box includes a 



digital certificate. 



132. The method of claim L3>f wherein the received black box includes a 
digital certificate proffering that such received black box should be trusted. 



B3 % 

133. The method of claim 122 wherein at least a portion of the private key of 
the received black box is encrypted according to a code-based encryption technique. 



The method of claim 1^33 at least a portion of the private key of the 
received black box is encrypted according to software code associated with such received black 
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box, whereby adulteration of such software code prevents such private key from being 
decrypted. 

The method of claim 1 ^2 wherein the received black box is associated 
with the DRM system / computing device, whereby such received black box is inoperable on 
another DRM system / computing device. 

3', . V 

136. The method of claim 135 wherein the requesting step includes providing 
information unique to the DRM system / computing device, and wherein the received black box 
was generated based in part on the provided information, whereby the received black box can 
recognize whether it is intended for the DRM system / computing device upon which it is 
installed. 

y37. The method of claim 135 wherein the DRM system / computing device is 
a first DRM system / computing device, wherein the received black box is associated with the 
first DRM system / computing device and also with a second DRM system / computing device, 
whereby the received black box is inoperable on another DRM system / computing device which 
is not the first or second DRM system / computing device. 

33/ 

13«. In combination with a digital rights management (DRM) system operating 
on a computing device, the DRM system requiring a black box for performing decryption and 
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encryption functions, a method of providing the black box by a black box server, the method 
comprising: 

receiving a request for the black box from the DRM system; 



generating the black box, such generated black box being unique and 
A— 

having a public / private key pair; and 

delivering the generated black box to the DRM system, the delivered 
black box being installed by the DRM system in such DRM system. 

1^9. The method of claim ^% wherein the receiving step comprises receiving 
the request by way of a network connection between the black box server and the DRM system. 

1^0. The method of claim lJJlfwherein the receiving step comprises receiving 
the request by way of an Internet connection between the black box server and the DRM system. 



Ijfl . The method of claim lj$ wherein the DRM system has a first previously 
installed black box prior to the requesting step, the first previously installed black box having a 
public / private key pair different from the public / private key pair of the generated black box, 
and wherein the generating step includes providing the generated black box with the public / 
private key pair of the first previously installed black box. 



The method of claim^41 wherein the DRM system had a second 
previously installed black box prior to having the first previously installed black box, the second 
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previously installed black box having a public / private key pair different from the public / 
private key pair of the first previously installed black box and also different from the public / 
private key pair of the generated black box, and wherein the generating step further includes 
providing the generated black box with the public / private key pair of the second previously 
installed black box. 



3 V _ , 



\^&. The method of claim 138 wherein the generating step includes providing 
the generated black box with an identifier indicative of currency. 



The method of claim ^43 wherein the generating step includes providing 



the generated black box with a version number. 

The method of claim 138 wherein the generating step includes providing 
the generated black box with a digital certificate. 

H > . 

146. The method of claim 145 wherein the generating step includes providing 
/ f 

the generated black box with a digital certificate proffering that the generated black box should 
be trusted. 

yfl . The method of claim 1^8 wherein the generating step includes encrypting 
at least a portion of the private key of the generated black box according to a code-based 
encryption technique. 
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\^t>. The method of claim J^47wherein the generating step includes encrypting 
at least a portion of the private key of the generated black box according to software code 
associated with the generated black box, whereby adulteration of such software code prevents 
such private key from being decrypted. 

1^. The method of claim wherein the generating step includes associating 
the generated black box with the DRM system / computing device, whereby the generated black 
box is inoperable on another DRM system / computing device. 

isb. The method of claim wherein the receiving step includes receiving 
information unique to the DRM system / computing device, and wherein the generating step 
includes generating the black box based in part on the received information, whereby the 
generated black box can recognize whether it is intended for the DRM system / computing 
device upon which it is installed. 

1 ^f. The method of claim 1^9 wherein the DRM system / computing device is 
a first DRM system / computing device, wherein the generating step includes associating the 
generated black box with the first DRM system / computing device and also with a second DRM 
system / computing device, whereby the generated black box is inoperable on another DRM 
system / computing device which is not the first or second DRM system / computing device. 



DOCKET NO.: MSFT-109 / 127334.9 PATENT 

152/ A computer-readable medium having computer-executable instructions 
thereon for performing a method in combination with a digital rights management (DRM) 
system operating on a computing device, the DRM system requiring a black box for performing 
decryption and encryption functions, the method for obtaining the black box by the DRM system 
and comprising: 

requesting the black box from a black box server, the black box server 
thereafter generating the black box, such generated black box being unique and having a public / 
private key pair; 

receiving the generated black box from the black box server; and 
installing the received black box in such DRM system. 

1 53 . The method of claim \ *fl wherein the DRM system has a previously 
installed black box prior to the requesting step, the method further comprising determining prior 
to the requesting step that the previously installed black box is non-unique. 

47 

1 5^. The method of claim wherein the DRM system has a previously 
installed black box prior to the requesting step, the method further comprising determining prior 
to the requesting step that the previously installed black box is not current. 

1 55. The method of claim 1 52 wherein the requesting step comprises 
requesting the black box by way of a network connection to the black box server. 
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155. The method of claim 156 wherein the requesting step 





comprises 



requesting the black box by way of an Internet connection to the black box server. 



1 




The method of claim 152 wherein the DRM system has a first previously 




installed black box prior to the requesting step, the first previously installed black box having a 
public / private key pair different from the public / private key pair of the generated black box, 
and wherein the requesting step includes providing the public / private key pair of the first 
previously installed black box to the black box server, whereby the generated black box is 
provided with the public / private key pair of the first previously installed black box. 



previously installed black box prior to having the first previously installed black box, the second 
previously installed black box having a public / private key pair different from the public / 
private key pair of the first previously installed black box and also different from the public / 
private key pair of the generated black box, and wherein the requesting step further includes 
providing the public / private key pair of the second previously installed black box to the black 
box server, whereby the generated black box is also provided with the public / private key pair 
of the second previously installed black box. 



L58. The method of claim 1 S'Twherein the DRM system had a second 





The method of claim 152 wherein the received black box includes an 



identifier indicative of currency. 
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1 60. The method of claim 1 5<f wherein the received black box includes a 



version number. 



1>S1 . The method of claim^52 wherein the received black box includes a 



digital certificate. 



1|>2. The method of claim L6l*wherem the received black box includes a 
digital certificate proffering that such received black box should be trusted. 



1 63' The method of claim 1 wherein at least a portion of the private key of 
the received black box is encrypted according to a code-based encryption technique. 

164. The method of claim \pl at least a portion of the private key of the 
received black box is encrypted according to software code associated with such received black 
box, whereby adulteration of such software code prevents such private key from being 
decrypted. 



The method of claim JS2 wherein the received black box is associated 
with the DRM system / computing device, whereby such received black box is inoperable on 
another DRM system / computing device. 



• 
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166. The method of claim L65 wherein the requesting step includes providing 
information unique to the DRM system / computing device, and wherein the received black box 
was generated based in part on the provided information, whereby the received black box can 
recognize whether it is intended for the DRM system / computing device upon which it is 
installed. 

1 6#. The method of claim y$5 wherein the DRM system / computing device is 
a first DRM system / computing device, wherein the received black box is associated with the 
first DRM system / computing device and also with a second DRM system / computing device, 
whereby the received black box is inoperable on another DRM system / computing device which 
is not the first or second DRM system / computing device. 



168/ 



168/ A computer-readable medium having computer-executable instructions 
thereon for performing a method in combination with a digital rights management (DRM) 
system operating on a computing device, the DRM system requiring a black box for performing 
decryption and encryption functions, the method for providing the black box by a black box 
server and comprising: 

receiving a request for the black box from the DRM system; 
^ generating the black box, such generated black box being unique and 

having a public / private key pair; and 

delivering the generated black box to the DRM system, the delivered 
black box being installed by the DRM system in such DRM system. 
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169! The method of claim L68 wherein the receiving step comprises receiving 



/ 



the request by way of a network connection between the black box server and the DRM system. 



if 

1/70. The method of claim 169 wherein the receiving step comprises receiving 



the request by way of an Internet connection between the black box server and the DRM system. 

y7 1 . The method of claim 1 6,8*wherein the DRM system has a first previously 
installed black box prior to the requesting step, the first previously installed black box having a 
public / private key pair different from the public / private key pair of the generated black box, 
and wherein the generating step includes providing the generated black box with the public / 
private key pair of the first previously installed black box. 

^72. The method of claim ^71 wherein the DRM system had a second 
previously installed black box prior to having the first previously installed black box, the second 
previously installed black box having a public / private key pair different from the public / 
private key pair of the first previously installed black box and also different from the public / 
private key pair of the generated black box, and wherein the generating step further includes 
providing the generated black box with the public / private key pair of the second previously 
installed black box. 
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lj7/3 . The method of claim 1^8 wherein the generating step includes providing 
the generated black box with an identifier indicative of currency. 



The method of claim 1^73 wherein the generating step includes providing 
the generated black box with a version number. 

1^6. The method of claim 168 wherein the generating step includes providing 
the generated black box with a digital certificate. 



116. 



1/6. The method of claim wherein the generating step includes providing 
the generated black box with a digital certificate proffering that the generated black box should 
be trusted. 



yll. The method of claim 1^68 wherein the generating step includes encrypting 
at least a portion of the private key of the generated black box according to a code-based 
encryption technique. 

1^78. The method of claim ^77 wherein the generating step includes encrypting 
at least a portion of the private key of the generated black box according to software code 
associated with the generated black box, whereby adulteration of such software code prevents 
such private key from being decrypted. 
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the generated black box with the DRM system / computing device, whereby the generated black 



\jI9. The method of claim 168 wherein the generating step includes associating 



box is inoperable on another DRM system / computing device. 

^80. The method of claim ^7>9 wherein the receiving step includes receiving 
^ information unique to the DRM system / computing device, and wherein the generating step 
includes generating the black box based in part on the received information, whereby the 
generated black box can recognize whether it is intended for the DRM system / computing 
device upon which it is installed. 

1 81 . The method of claim IJI>9 wherein the DRM system / computing device is 
a first DRM system / computing device, wherein the generating step includes associating the 
generated black box with the first DRM system / computing device and also with a second DRM 
system / computing device, whereby the generated black box is inoperable on another DRM 
system / computing device which is not the first or second DRM system / computing device. 



In the Abstract: 



Please delete the Abstract and insert the following: 



~A digital rights management (DRM) system operates on a computing device and 
requires a black box for performing decryption and encryption functions. To obtain the black 
box from a black box server, the DRM system requests such black box from such black box 
server. The black box server in response generates the black box, where such black box is 



